ZyXEL Communications ZyWALL 2 Compact Manual page 35

Client Mode Select Client Mode to have your ZyWALL use a username and password when initiating this VPN
connection to the extended authentication server ZyWALL. Only a VPN extended authentication client
can initiate this VPN connection.
User Name Enter a user name for your ZyWALL to be authenticated by the external extended authentication
server. The user name can be up to 31 case-sensitive ASCII characters, but spaces are not allowed.
You must enter a user name and password when you select client mode.
Password Enter the corresponding password for the above user name. The password can be up to 31 case-
sensitive ASCII characters, but spaces are not allowed.
Local:
Local IP addresses must be static and correspond to the remote IPSec router's configured remote IP addresses.
Two active SAs can have the same configured local or remote IP address, but not both. You can configure multiple SAs
between the same local and remote IP addresses, as long as only one is active at any time.
In order to have more than one active rule with the Secure Gateway Address field set to 0.0.0.0, the ranges of the local IP
addresses cannot overlap between rules.
If you configure an active rule with 0.0.0.0 in the Secure Gateway Address field and the LAN's full IP address range as the
local IP address, then you cannot configure any other active rules with the Secure Gateway Address field set to 0.0.0.0.
Client to Site Select this radio button to build a client to site VPN connection.
Local IP Address Enter a static local IP address. The local IP address must correspond to the remote IPSec router's
configured remote IP addresses.
Site to Site Select this radio button to establish a VPN between two sites (groups of IP addresses).
Address Type Use the drop-down menu to choose Range Address or Subnet Address. Select Range Address for
a specific range of IP addresses. Select Subnet Address to specify IP addresses on a network by
their subnet mask.
Starting IP Address When the Address Type field is configured to Range Address, enter the beginning (static) IP
address, in a range of computers on your LAN behind your ZyWALL. When the Address Type field is
configured to Subnet Address, this is a (static) IP address on the LAN behind your ZyWALL.
Ending IP Address/ When the Address Type field is configured to Range Address, enter the end (static) IP address, in a
Subnet Mask range of computers on the LAN behind your ZyWALL. When the Address Type field is configured to
Subnet Address, this is a subnet mask on the LAN behind your ZyWALL.
ZyWALL 2
35